Gateway DNS Request Processing via Secure Tunnels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current DNS request processing techniques are slow and vulnerable to security threats, as they do not effectively utilize multiple access networks and lack secure channels for transmitting requests and responses, leading to potential tampering and incorrect IP address resolutions.
Innovation Solution
A method and system where a gateway processes DNS requests by selecting multiple DNS servers and access networks, transmitting new requests through tunnels, and prioritizing responses based on accessibility, predefined policies, and geographical location to enhance speed and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If DNS proxy caching and placing DNS servers close to network edge are used, then DNS response speed is improved, but security is compromised due to lack of secure channels
Solution Approach 1:
The gateway acts as an intermediary between hosts and DNS servers, establishing secure tunnels (VPN connections) to transmit DNS requests and responses. This mediator approach enables both fast response (by being close to hosts) and security (through encrypted tunnel connections to multiple DNS servers)
Solution Approach 2:
The system segments DNS resolution by using multiple DNS servers through different access networks. The gateway divides DNS requests and distributes them to multiple DNS servers via different tunnels, providing both speed through parallel processing and security through redundancy
2Reliability
If multiple access networks are utilized, then DNS resolution reliability is improved, but system complexity increases
Solution Approach 1:
The gateway performs multiple functions: it acts as a DNS proxy, establishes secure tunnels, manages multiple access networks, and implements selection policies. This multi-functionality consolidates complexity into a single device rather than requiring separate systems for each function
Solution Approach 2:
The gateway autonomously manages DNS request distribution across multiple access networks using predefined selection policies. It automatically selects which DNS servers to query and which tunnels to use without requiring complex external coordination, reducing overall system complexity
3Speed
If DNS requests are transmitted without secure channels, then transmission speed is improved, but security is compromised due to tampering risks
Solution Approach 1:
The system establishes secure VPN tunnels before transmitting DNS requests. This preliminary security measure prevents tampering while maintaining transmission speed, as the encrypted channels allow fast communication without security compromises
Data Source
AI summary
A method and system for processing Domain name Services (DNS) request in a gateway with at least one local area network (LAN) interface and at least one wide area network (WAN) interface. The gateway receives a first DNS request from a first host via one of the at least one LAN interface of the gateway. The gateway then selects a plurality of DNS servers. At least one of the plurality of DNS server is accessible through at least one tunnel. The gateway transmits a plurality of new DNS requests to the plurality of DNS servers. The contents of the plurality of new DNS requests are the same as the content of the first DNS request.